<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>CWE-922 on ZAP</title>
    <link>/alerttags/cwe-922/</link>
    <description>Recent content in CWE-922 on ZAP</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <atom:link href="/alerttags/cwe-922/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Information Disclosure - JWT in Browser localStorage</title>
      <link>/docs/alerts/120002-1/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>/docs/alerts/120002-1/</guid>
      <description>&lt;p&gt;JWT was stored in browser localStorage.&#xA;This is dangerous because data stored in localStorage does not expire. .&lt;/p&gt;</description>
    </item>
    <item>
      <title>Information Disclosure - JWT in Browser sessionStorage</title>
      <link>/docs/alerts/120002-2/</link>
      <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
      <guid>/docs/alerts/120002-2/</guid>
      <description>&lt;p&gt;JWT was stored in browser sessionStorage.&#xA;This is not unusual or necessarily unsafe - this informational alert has been raised to help you get a better understanding of what this app is doing. For more details see the Client tabs - this information was set directly in the browser and will therefore not necessarily appear in this form in any HTTP(S) messages.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
